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(57) Abstract: A system and implementation method of controlled multicast, the system include: Ethernet switch (1), multicast 
router (2), the portal server (3) and AAA server (4) which connect with the multicast router, wherein Ethernet switch (1) connect 
down every user host and connect up the multicast router (5), it complete layer (2) multicast switch; the portal server (3) use as 
the interface of user access authentication; the AAA server 4 use to save the authorization configuration of user joining in the 
multicast group; the multicast router (2) connect up other system's multicast router (5), cooperate with the AAA server (4) to 
complete the permission authentication of user joining in the multicast group, send the control command as the authentication 
result, control Ethernet switch (1) to forward multicast. The implementation method of the present invention can resolve better 
the authorization authentication and controlled problem of the sender and receiver joining in the multicast, and identify the user 
joining in or leaving the multicast group expediently, stop the user's group member identification on it's own initiative through 
the user line out; and won't affect forward efficiency. p 
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(57) *S5£ 

m&fe&U 2, ?X^m&$r&&&fo&&it i ) portal 3 AAA Bik 

5 &%&~m&&tiM\ portal JIB^H 3 &A.iM£tf)& 

AAAJil^ll4^^#^J/^^#^L^WMe.j:; £E#*Ml&2 

xif &&&4& & &Lm&$fe& n s , se.^ aaa /jmmi 4 — m 
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-fe^iSC (Internet Group Management Protocol, if #: IGMPi&iO 
& fl&i&Member reportftlX, 

Norihiro Ishikawaf^f fcthlGMP^W*. <<n>M#4£^IGMP#- 
& » ( IGMP Extension for Authentication of IP Multicast , f 'J 
draft-ietf4drnr-igmp-auth-01.txt) ^RADIUS^r^i^i^ «&L#M£fc&iU£ 
ft RADIUS^/" Jfi>>( RADIUS Extension for Multicast Router Authentication, 
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« 
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&^3&.&.$L-fM .PiMiMl ^RADIUS Remote Authentication Dial In 
User Service 6W^> -fj -f draft-yamanouchi-RADIUS-ext-OO.txt ) , ^TM 

i£ i& -R CHAP ( Challenge Handshake Authentication Protocol ) ift 
Challenge-Response^ &iM£ft f> . ^ — +ta&&^1t&2U*JP&& 
^XBt , AO^iii H^-^T 15* ft challenge-response^ 'JiUl.'fe . AO^-il 

^^iat^lE#&^^#^P^^^#^JlP^#-^ t^J&ifc p ^ 

(silently) . iti±ifcn^& 
H-iA-te'S. *D^^||^i^iiEN-T^^RADmS#^i^«l^. ^ 

^Ht, iij n^^^^^^IP^'J^^. 

Jii£RADmS#-^W^A^RADmS^^^Ji3iWf>i., ^T^-^ 

u ife * fete Z 1 

&#-*U£Jk.£-, iAiiEBt^^ H^:^ #J#i a > ( UserlD ) * 4^. ^7 T 
-g-^, iA-jatBt^^M^-fchallenge^iAiiE.. iEi&^^^^i^&WA 

ft -^liL^^o ft^T-^-it^— ^^r'^' JWMrtf***^ 

RADIUS— #. i^i±7^-^^RADIUS^AiiE.A^r^^#^o 
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*, ^iff^H^Ml, #^iliHjRADIUSWi-i+f^^. 

it it f ?f*£:*MU$i£T JM^UrS! , RADIUS^fit f ^^^^J'Jit 

-^i+##;MML, ff^5'jRADIUSM#iff^^. i£if# MrJMR. 
3C$i£7 , RADIUS»iff ^^^^'Ji»^^^^. 

^ifL#^-^H^'J— -MGMPi^ (IGMP Join) if^, ^^.i^— 
^ Access-Request^il^RADIUS^#-iAiiE.^^^if ^-iAi£ „ £ ^^'J M. 

Accoimt-Request/Start#.iL^RADIUS^E#-it f JI&^il:7HH+ f „ £ 
i^&il'M!] — -MGMP^^f- (IGMP Leave) t$#L/s, 'giCill — ^ 
Account-Request/Stop^ML^^#i+ f IBj-H^i-t f . « 
i*J £jL#i&& HiMfW?] , RADIUS#->m^i^^i^iL#^^ 
i&^^Access-RequestfML. t^HT^-ft #-#J ^JJJL^H^ 

^iff^^ (proxy) o iriff JM-»*tfcA^«4Wh JNMlBt > 
JLiHAccounting-Response^ iA^5L^M#^ & H o 

jtb^h, CISCO ^^f&T CISCO tef-m-tyVL (CISCO Group 
Management Protocol, f^#>: CGMP) 1^£&^;^^^^^£.Tift 
£jM##j£J3121£ (flooding) <HH*~]^, ifi± CGMP, JLygriJb^J>X4£#']— 

mxmt. CGMP WM^iM*S I/St*, A^^M^" (Ver) 4 tb#, 
(Type) 4tb#, (Reserved) 2^"f . ULiLt GDAAJSA 

^'NBU Count )1 ^^lM"GDA/USA2tlIL/&. GD A ( Group 
Destination Address ) A— 4* MAC lJL#Jkiit , ^.^.^M-^o^^Wt^iL 
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# IP ifi MAC Ak.*t, USA ( Unicast Source Address ) A. 

i3.m&tf3-fatf] MAC Afe»Ait, ^#-^*fc*t. 

^JLS2^r^, CGMP3T&#f i#s±^*»T: il#Uj£_ilLlGMP 
Membership Report*M^AiiL#&L224. 1.2.3, 

i±j ^ tft M i& At *t #T MAC ^ Ait 0100.5e0 1.0203 4*. 
CAM(CAM:Content-Addressable Memory)^, © ^CAM^t $MT ^ > 
i£^jU&#JC (flooding) $)J&^CPU^J-#^^ll^^f^"^ D « 

H>|£#JlGMP Membership ReportfMl^ , f£7 Xjrikfc3L&4fWf 
^^h, ^CGMP Jomfo£.£$.t&&\X&fc> t^-fe^Ttf 

^P^J.^#la^A^MACifc*it (USA: 0080.c7a2.1093 ) ^t-it^A^ 
iJL^^MAC^jh (GDA: 0100.5e01.0203 ) , #J^^Join^*M^. 
^^^^'JitCGMP Join^^, ^CAM^t^A— 
GDA(@^: 0100.5e01.0203), t^A.^a#^A^^ * ^- ( @ 
^#: 2) i^^^WHI^^^II6^^a-t (S^: D . 

n ^ Ait^±USAi^^-#^ • 
|UiL@3, ^^W^^^L4^^JL#M224.1.2.3Bt, l§] #j£itlIGMP 
f-^-Ji^ ( IGMP Membership Report ) #J^#J£_#M^, £#*$M>T 
& ;fa^tft £fL# 224.1.2.3 , ^MAC^iiL0100.5e01.0203 *4* 

CAM^L, tffcjUWifcM*. fft^XliifJfi^^ & * 1^2 
(BW&i|jfaiM7L 1). ifi7^^H^'JlGMP Membership Report^iL^, 
l^7*t^ML^#Wf*t^K ^CGMP;faA (CGMP Join) 

#LiLM##)^^> «ML&^7 t#^ p A.la^JL^i^^MAC^iit 
(USA: 0080.c7b3.2174) ^ t-ffr^A^^t^^MACi&iit (GDA: 
0100.5e01.0203) , #JL&^JoMH^. ^ ^^^5'J-itCGMP Join^ 



WO 03/065677 ^ ^^CT/CN02/00596 

iU£, /fl GDA^CAMiMf 2»J -->HM& . ii5±USA*4UK.#^*UW* 

_ti£^ IGMP 4f RADIUS 
#^^4t^f--)^, ^aA^^^^T^: (1) ^^-n^Jc?,^ 

KM. (2) JpZfL&mxm^WSL, *l2LgrMMfe&nri$L4r, a**4Nt 
i*u#l**rIGMP4fe.'fr. ^iL, it«>HW«*^Sit^t#>^4fc, itt^i^ 
#^iL# IGMP #-Jt. CISCO CGMP ( 1 ) S. 

&#iUaUfc&Jfl / >te>M&#Ma# 3r*. (2) fete & ZJNft r 
¥) "JLPWlM" ( Silent Leave ). 

jflLtifc IGMP r JM? RADIUS #MU&I*1 CISCO ^3 CGMP 
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IGMP V2 (*L*2) WSL#^*a^a-fcWK.; *#*££f". 

i^**M*J&*lMBaM*tt Portal fl^H-^ AAA 
* t portal JMMM / o , AAA A -f 

^##>H&*M&#J*.iMfr AAA **ffl 

/?fri4.*$iM«MM»*-5 AAA J8MhSMLW#Jfl*fr#3fc RADIUS iHMf 
RADIUS+W^^it'ftWil, fti-UW^^^Hi 
fil^MJ&tfSfrfeW*. (HGMP: Huawei Group Management Protocol ) 

-£&a£##>^iM£*t , # & # W 3L#^-M&3& n *I ^vlan^Jtfr 

**tiGMP*.itat#*t3B f **mm-* &4£*j «* w aufcWMrte 

^^tHGMP^#J^5tii#^S^^#M#a,^#JL; , 

( 1 ) IT &a&W&AiAiiE*tS: £ — W . 

portalJJM^ll4^^^P, *fr^&te#/fl;*£^#^#iUiMir&, 

*£j£.;M*rtf) #-iX^^-#>^^vlan-f-i6^^E.— 4-^1 £R#Hfr ffi 

t; 
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( 2 ) VX & n P *J ^vlan^t i*UGMP*i:*#*ta: 

«^W^^3MMft«o*J^vlan, f^oX'J^- ^vlan, JL#-^s& 

*h3S: H^'-JlGMP Membership Report#^>£ , @ ;#iJi#3£& H»l£. 

ii^^^la^K^W^lWL. ^^it^&UserlD, ^^fc^^IGMP 
Membership RqwrtiM^W'M f ■ 'J UserlD^ £ / 

£jAAAJIl^*i&#iMflL, fcAAAJlMMMMM^ t*Wit*-****it 
mffo^: J30&i£acceptfML#^> ^'JiCi&reject 

Aii^^LiL^illMa^t*****^^*' ^^i^— ^HGMP^p^ 
(HGMP Join) *JLiUtiMI3UM*. SNMLfe^T t-Sfr*»AJM**a#JL 

Membership Report«iU^#^^#^^**^t*; 
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ia^t#^#*fciattHfHGMP JoinJML; S&4*^& W^*Mi&^:ft*»^ 

jt;&u;^lH.#M&&^tfHGMP$*f (HGMP Leave) #JL* i&3±ilL#2r 

( 5 ) ^4fc*^HGMP4ft*J#it.ait#*t3e: £ £4Mfc^'jHGMP Join 
*MU£, ^&L#J*,JU:Xt^^MAC*fcAt*CAM4L > Jp^tW^J^M 

336, it^^^tM#i4^/f^->EL^MACi4^t. 

Leave#liU£ , ^ *^MAC*fc*t*CAM4Lfl5#Sl — , 

#ititvlanIDi^»|-^i« P , -f t « 

Membership ReportfMLB* , ^^rvlan-f- fl& 4.4**.^^ £ n 

(7) A#t***MMa: **it*tt#Ma«-. 
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vlantMa.; faMtfj&>*2L$tfo^#*fi vlani&i$U 

Jii&Jf5 (6) ^t^M^^^^^^^j^tM^^^ 
vlan -f , »*iltfc# m—^SL&fc-ttfiKn^-M^ vlan # 

_hi£^ (7) #mt^^iEtijlB.#lJL^#:#i£-T^ititT^v*- 
£$L-^: n&$L&ft r T^Ht J^Mu& HGMP Leave ^JCtfHfjhft 
^l/'j^iliia#^ > ^M*^$L2f>£^ IGMP Leave 

^fiL*.aUfc*nt . ^ — >Hfe^tt##tt*MM-* 3&#]/8 f^£#] *J 

4t (Access Control List, ACL) tf$k»fo*Jt4T*p&* *#>$A 

^b^J^^A: fcftf'fr'^Js.ms.tiry &.#7iU£#4*.6*#L 
vlanlDiMj #;fcJiXfr/fl/tf*A.iUi£, ^«t^ft*iR*!| 
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T*fr n> £a*JMhtt*tftra*. -MN igmp 

Leave ^tfr«*T*^ift^. fl^^^N". SEW* 

SIMM • 

9 1 gMfcltft <Hj CGMP 4Ml4M.^*9 . 

s 2 &M>fcfcmtfi cgmp i 

224.1.2.3 tfffTf 3fcr^^*S. 

9 3 iUWt'fcfltf CGMP i#*Mti* 4 %^M*M.m& 
224.1.2.3 #flr-5"3itf^#9. 

9. 

9 6 A*£L9I i*t 1 **»AJk*MB. 224.1.2.3 
9 7 A^ B ^tt&tti^4|^All» 224.1.2.3 

9 9^i H ^ttM#ti-^l 224.1.2.3 iHMt-f-v&T*} 

9 10 t&tsMr & & 1 tfl & t ^* W . 
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tiLft IGMP V2 (#L*2) t^fWiMMI** 

J%i$&$&&& H 2*M£*# portal JMh» 3^ AAA ^1^114, + 
portal jM»* 3Mtfftr &^iM£tf}& P , AAA 4 /8 f-^MM ^ 

^^la^&tt&PM&jE., &M#*£&H 2 4 AAA iMH* 4 ^fSJ^ 
Client-server > H 2 AAA 4 — ^ |g) 

*.W*UM* 1 ;WLfltt*MMM** 2 4 AAA 4 

4U'^iMl*t#>fc RADIUS 1sH*#",ftT^ RADIUS+#-i^#^it^tW^, 
fl& W SUM* 1 *MM<M$-fc * 2 4L« ftftM HGMP 

ii.it portal H^H-R#6^#: n ^i£##^i# AAA ^HA*A 

iilMh*. St AAA ^^t^#J^t^^/#^^^/ r iAii£Bt 
tAW^/i. & (group) 4L^/ r *»^fiL**^fc*t- #ivW£.4fc4R» 
(LAN Switch) vlan, -J|t>H* n >MJ . ^-t^c? 1 

H, 2-5frft]&&£~3Lfamr 4. ititiA 

•iiE^, £R#J&&J|-£,^l7.£.^ 1 <#J3 /*#•£*( *P: 1 ) MMtt vlan 
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-5-: vlanl {3&XtiLiSLfiP£M> 1 1*/ +*MJ^ 1 >• 

*JLffl 6. « J* i ?ft*»^*a#Ma ( 224.1.2.3 la ) fit , 

i£ IGMP Membership Report #LiL*»/Uk**& 224.1.2.3, iUfeSl* 
( Switching Engine) 18 ******* B ** MAC *b4t 0100.5e01.0203 * 
#,CAM^, B#CttM*+Sfc*Mt*. ****#£. ( flooding ) 9Q 
CPU *t#«^^^^*«^« a 
Ji vlan -f" ( *ti^ 1 *fc^- vlanl )o 

H^JIGMP Membership Report*iL# , ^vlanlD: 
vlan 1, #iti±'S^#^^^/ , ^UserID: jMM, 
UsedD^/^, -MMfcfc^tt*!.**** (224.1.2.3) 
r^^RADmSi^i£*iL$ijAAAJ3IL^Il3iWAii£» AAAI*.*JWM*/a ^ 

-ft 19£ , ^ ^J^reject^LX^^ . fl«rejectfMu£ *4ftfrfr*t«. 
^Jaccept**^#^l ^ %m^^^^^^^ ? 

*HGMP Jom**£ilU'J£&^ ***fc^T t^^#^J* 
^vlan-f: vlan l***fcfr/^W#Hfc*k: 224.1.2.3, tfXfe^Jam^ 

^^*LW»J*HGMPJoin**^, £CAM^*;fa^— & 
^itWf^JtJ: (224.1.2.3) Xt^^MAC*fe,*h: 0100.5e01.0203, 

*JLffl7, «**.i.*l»4) fa^&ms. 

224.1.2.3Bt («.**Ciitit*A.^it, iUatfrifcn Ji3l*-#»t <#iL 
jfcM— #), !§J#iL^iIGMP Membership Report**^ ^L*?!* 
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ftffi4tB^MAC*b*t0100.5e01.0203*-f-CAM*.. ^WJili^. # 

& H 5>J IGMP Membership Report^ IM*- & *r* # 
vlanID: vlan4, #fiU± i e*4L4W^jft^ ^ WserlD: i*. 4, 
^iJ^UserlD^^/'^, iSl^*l**»XWiBL#NWt (224.1.2.3) JfrAte. 

ZUJft&M, &M2U3hwectfa$L&&o J^&II^JrejectfML^^^ 

-^HGMP Joina^^'J^^' *Ml^T t**Ala#MM*tt 
iL#Utfvlan-S*: vlan 4^**;fc>M$*M**M>t: 224.1.2.3, #-&-&-^Join 

^£4MMW£HGMP Join#.iU£, (224.1.2.3) *fr 

£#MAC&*t (0100.5e01.0203) -2r£-fCAM£., ^-f^®6^f^# 
^ ^— ^i^Ll^p^ij224.1.2.3M^^ , CAM^t 4^35 > 

^ p ■ S H^.^li3gi^L^IGMP Membership Report^ 

— (COPY) 2»1 la#lt#&^PvlanID. 

#Xffl9, *A^l***^-te*NteL224.1^.3Bt. ^iLStlGMP Leave 
#LiLS!l3t^*L. 9t ^jkbBtiti^l^^IGMP Leave^^B^^ 
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*tf*.fc«#*. ****** * ^MACJ^it 

0100.5e01.0203**CAM*., *4UM|*4l*, *#*4M^L«t«I*4L _ 
1^5 (PP: . 
***J|«*AH *»*4ML+^vlanID: vlanl, 

#«t224. 1.2.3, Pp*»ffl9/5t^. #*+*M*»#«3 r # , M^vlan 1# 
^^*3^^T*l*»^to*Ma**t (group) *£H ^fiL4tJfc*224.1^3* 

Leaveax^^^ ( BB9t^*HGMP Leave*ML#W>&^&^* 

vlanl^***ftt*MW&*t: 224.1.2.3, #ife^Leave*4^*. 

£ *UMMfc*l TtHGMP Leave#LiL# . * 4&#Mfe*t224. 1 .2.3*t£ 
MAC^iit0100.5e01.0203*^CAM^#f J-^^^ . #5i.itvlanIDi^ 

*], ^jtfflio. (*Wiot**« (idc) ) fc£>HM**aiLai 

fcTfUMt^ffi**'!*^ (Access Control List, ACL) , 

H&ti?]*.. ^^ii*&^*iMfc*|j«.ai4r^^iife. mm te- 



xt, 
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5 ift4£.0fl£IiH>o 
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& H Ji#4**ft £ It » * «i W au**wfc#r=- A 

&L*&*. *v^^W^**^^/i*^«^ IGMP V2 ItoSUMrtt. 
portal JJL***» AAA * t portal 

&%mm& AAA jR^^^H^iW^/^^^Ma^^^' 

#la#M&-d?&^ AAA H^SMLfSliMxfr#>£ AAA -fr-BUT^T # 

RADius+^^^it^ix., ^ &4M^ia*MMf 

^JSi^-R HGMP ( Huawei Group Management Protocol ) #;#4£#Wi:>U 
iM^IGMP^JU&Wt^, v;UU&W9/tti&#N ;faAjJL##iA3£^& 

igmp #iuaMf*t« , fM£#J *.« ayfcMfc 

hgmp ^^j^iL^f &s^3&#^^v&^#il; .£#t»&/M£iL 

it ft- <ft JWMMfc jNM.: 

( 1 ) 1&*&a£#4£A.iU£*t3g: WiMfr, -f#*tii portal 
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^^^^^^^^r^^^^'^^ AAA %k 

m r mr^^M vian -h&jMl— >M r is.^m^\¥J%^ ; 

( 2 ) # ^ &']^ vlan J* IGMP 
^^^^L^M^^^^^vlan, ^H&P*']^-- ^vlan, JUt-^h 

MAC 3fcifc*& CAM 
(§1: MAC i4iih^f5tt^^^nBt, ^^iJ^j^n^-^JL 

*t3g : H^'J IGMP Membership Report $Ml£ , #4£UJi-^& H-'fc 
$|J6^^^^^^^«&^ vlan^, iii±*## (1) 
i&^^l/flL^H^WjKfML. IUM-jS^ IGMP 
Membership Report t^f. ^«*f>J^^#iR>b^^^. «* 
ijMT*^^te#Nfc*t*>* , li» *.aUT4LW RADIUS iUiMMLSl AAA 

^p^: ^M^#9#*Ufc» ja>JiLill accept ^H'J&aL reject 

foiL&M; fe&B reject #JU£*4fcfcWt«» >W1 accept 

^^^Ml^ii^****^**^ 3 *' M^^-A— * HGMP Join 

Xt^^vlan-f-^»t-**»^fiL**l&*t. Join #-B-> ^ 

^^fc»i£iH^4Nft&#aMj&-- #*fe*fr IGMP Membership Report 



17 



WO 03/065677 



T/CN02/00596 



(4) &&&&&&&&& &n&&^4f&mtJSL, m^m^m 

HGMP -feHX/ffc A %L$k&.m#i%L%\ W^L: & VX m Jl & £3.j&& & it- 

X#£ft#M!»*t # HGMP Join ^LiL; ^ IM^t^-iM***^* 
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